Re: [TLS] TLS 1.2 draft

Eric Rescorla wrote:
> 
> What I'm saying is that the recommendation to prevent his attack
> is to use an RSA_DHE ciphersuite and use a fresh DH ephemeral
> with each key exchange. This provides the same security at
> a substantially superior performance level.
> 

On the subject of DHE and performance... should we allow a server to
optionally send the subprime ("q") value in ServerKeyExchange?

Steve.
-- 
Dr Stephen N. Henson.
Core developer of the   OpenSSL project: http://www.openssl.org/
Freelance consultant see: http://www.drh-consultancy.co.uk/
Email: shenson@drh-consultancy.co.uk, PGP key: via homepage.

_______________________________________________
TLS mailing list
TLS@lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls